CVE-2019-20044

CVE-2019-20044 is a privilege escalation vulnerability in Zsh before version 5.8, affecting various Linux distributions including Apple, Debian, and Fedora. An attacker who can execute commands can bypass the --no-PRIVILEGED option by loading a malicious module, allowing them to regain dropped privileges. This vulnerability has a CVSS score of 7.8 (High), indicating a local attack vector with low complexity, potentially leading to high confidentiality, integrity, and availability impacts. There is no known active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.